Transforming IT & Cybersecurity into a Business Enabler

The Most Exploited Vulnerabilities in 2016-2019 as Reported by the FBI. It probably won't surprise you that 7 of the 8 most exploited software vulnerabilities are to be found in Microsoft products. Their widespread use across organizations and institutions makes them an ideal candidate for cybercriminals. According to U.S. Government technical analysis, malicious cyber actors most often exploit vulnerabilities in Microsoft's Object Linking and Embedding (OLE) technology. OLE allows documents to contain embedded content from other applications such as spreadsheets. But also Adobe Flash Player makes it to the list. Older Unpatched Systems are Vulnerable for Cybersecurity Attacks   A recent report on the most exploited vulnerabilities by the Cybersecurity & Infrastructure Security Agency (CISA) and the FBI listed the most routinely exploited vulnerabilities in the wild. The interesting thing is that most of these vulnerabilities are pretty old, yet cyb...

Today companies face utmost global competition. Like new machines, materials and processes implementation, one has to constantly update documents to prove the operational excellence and help meet quality standards. Document Management software will help you do just that! It automates and manages document control processes, eliminates paper process and can greatly increase company-wide efficiency. •ISO Compliant Document Control System Document Management provides a comprehensive set of document control capabilities for organizing and managing all quality documents, such as Standard Operating Procedures (SOPs), policies and work instructions with complete version history along with CAPA procedures, non-conformance reports, forms and more in a centralized repository. A single, cohesive system for all documents makes the search for and the retrieval of documentation easier. It also ensures that only the current version of the document is ...

    Emergency Patch Released for SMBv3 Vulnerability Microsoft released the KB4551762 security update to patch the RCE vulnerability found in Microsoft SMBv3 a couple of days after the flaw was disclosed as part of the March 2020 Patch Tuesday. The Windows SMBv3 Remote Code Execution vulnerability, tracked as CVE-2020-0796 and dubbed as SMBGhost, allows a remote and unauthenticated hacker to execute the arbitrary code on an exposed device. Microsoft stated that: "To exploit the vulnerability against a server, an unauthenticated attacker could send a specially crafted packet to a targeted SMBv3 server. To exploit the vulnerability against a client, an unauthenticated attacker would need to configure a malicious SMBv3 server and convince a user to connect to it." Microsoft originally planned to fix the flaw as part of its March 2020 Patch Tuesday update but pulled the plug at the last minute. Now the tech giant followed up with KB4551762 to fix the SMBGhost...

New build for high-class performance, Microsoft Edge Chromium, provides the security and privacy users need. New features added to the design to bring the best of browsing. The new layout gives the users the ability to create and custom the way you browse. With the new style of Microsoft Edge Chromium, users can choose what they see whenever they open up a new tab. Privacy is the biggest focus for the new Microsoft Edge Chromium. Users can select what privacy level to allow the browser to track. With Microsoft Defender SmartScreen users can browse in peace because it automatically protects from security issues, phishing, and malicious software. Microsoft Edge Chromium provides users to browse from anywhere on devices on the currently supported operating systems.

Anyone running Windows 10, Windows Server 2016 and Windows Server 2019 is "strongly encouraged" to install Microsoft patch right now. Microsoft January 2020 Patch Tuesday fixes 49 security bugs after the US National Security Agency (NSA) discovered a critical bug in the operating system. These 49 vulnerabilities, 7 are classified as Critical, 41 as Important, and 1 as Moderate. Microsoft patched a spoofing vulnerability present in the Windows user-mode cryptographic library, CRYPT32.DLL, on Windows 10, Windows Server 2016, and Windows Server 2019 systems. The vulnerability could allow for remote code execution. In other words, allow hackers to compromise trusted network connections using spoofed certificates to deliver malicious executable code under the pretense of a legitimately trusted entity, commit man-in-the-middle attacks, and decrypt confidential information. For example, HTTPS connections, signed emails and files, and user-mode processes launching si...

Windows 7 Extended Security Updates Users who are still running on Windows 7 operating system, are exposing their computers to critical vulnerabilities. Is your business prepared for Windows 7 End-of-Life? Running an unsupported operating system is not an option anymore. Data breaches, systems hacks, and vulnerabilities are very common, and ransomware can bring a business to a halt and every business is a potential risk target. With an unsupported operating system, a business is easier to exploit, leaving the network very exposed. It is best and simple to upgrade to Windows 10 latest version. It has a long life still, and that means many years of support from Microsoft. Organizations will need to anticipate the cost of purchasing the new operating system, but also of their business-critical software to ensure compatibility. As many business and enterprise users are not able to switch from Windows 7 before the End-of-Service, Microsoft intro...

Microsoft messes up another Windows 10 Update by giving it to the wrong users. Microsoft pushes another Windows 10 update that wasn't with mistakes or bugs but delivered to the wrong machines and users. The update implements "quality improvements on Windows Autopilot configured devices". Windows Autopilot now is used to set up devices in businesses. Windows Autopilot is not installed on Windows 10 Pro or a later version when the device is not registered or configured for Windows Autopilot deployment. Windows Autopilot has never been offered to users operating on Windows 10 Home. The update was pushed on Windows 10 Home and Windows 10 Pro even though they are not machines registered for Autopilot deployment. As a reminder, if you see an update for Autopilot on Windows 10 Version 1903 displayed as an update on your Windows 10 Home or Pro machine, you do not have to download it. If you have already downloaded the update, it does no harm to your machine, it jus...